This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9e82568-ca34-4c91-9914-cdbcaa7388c2.roa
File:                     a9e82568-ca34-4c91-9914-cdbcaa7388c2.roa (raw, json)
Hash identifier:          xx5/5vXAlNa9PJ7QXgtOz6sxA0FRGvFzMPmT4U4ljmw=
Subject key identifier:   F9:AA:6F:D7:10:7F:E7:AC:C3:10:C4:B4:72:A9:E6:F3:AD:B1:56:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A88BEA9925EAADA666A2031845F9B8FED446CE9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9e82568-ca34-4c91-9914-cdbcaa7388c2.roa
Signing time:             Wed 03 Dec 2025 01:11:17 +0000
ROA not before:           Wed 03 Dec 2025 01:11:17 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:88:be:a9:92:5e:aa:da:66:6a:20:31:84:5f:9b:8f:ed:44:6c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 01:11:17 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=53ea9991ca7a70c000cbb1e887bbbd574607e62b80dcbd3bf3867258e754aa7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:9d:e3:06:97:a0:29:66:b8:fe:36:56:c8:
                    a7:24:2b:29:8e:1c:c9:1a:4d:73:a3:df:73:f1:08:
                    ed:d4:d7:17:79:47:f4:2a:bb:cb:f6:95:90:e6:28:
                    d6:e7:fa:b5:ce:39:9d:11:d0:d8:2e:8c:66:88:3a:
                    48:5f:75:15:c4:35:c5:6b:47:d1:ae:cd:a7:bf:66:
                    00:23:de:7a:24:53:38:ff:c7:84:b4:cf:75:d6:36:
                    74:e6:85:f7:e9:08:c3:98:cb:ba:47:64:6b:0b:bc:
                    3b:ac:66:bf:ae:b7:d9:63:99:86:d4:9a:0b:b1:9a:
                    55:62:59:b5:37:ab:93:71:55:e4:bc:9a:e7:7b:9c:
                    d1:ff:e6:79:52:71:83:10:fb:a6:a8:e0:6b:53:18:
                    03:1d:84:56:c1:7b:f6:bd:9d:0c:69:9b:ec:ac:44:
                    bd:05:19:f7:71:f1:86:6c:7a:68:a8:e7:dd:62:df:
                    b3:c1:eb:0c:d2:6b:36:f8:4e:bd:5d:85:9a:0b:0b:
                    1a:f0:d0:7d:74:76:f5:e3:5b:9c:e8:86:b2:9e:cf:
                    68:13:cf:3f:1d:c6:db:4f:7b:bb:7f:26:90:f7:e1:
                    6c:ce:17:d5:49:02:0a:5a:c8:8e:fa:db:2d:0d:f0:
                    9f:9d:b7:34:43:28:09:0a:0e:9d:c9:9c:a1:67:44:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AA:6F:D7:10:7F:E7:AC:C3:10:C4:B4:72:A9:E6:F3:AD:B1:56:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9e82568-ca34-4c91-9914-cdbcaa7388c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:47:81:98:da:97:79:b2:70:f9:a6:5d:c3:e1:7f:15:9c:de:
         b9:13:31:96:12:ef:b4:91:7a:c9:a1:91:7e:6a:dc:6f:1c:7b:
         e4:8c:a5:e7:e8:1a:0d:a7:02:4b:b2:1d:6c:fc:b7:11:29:39:
         e2:c4:66:83:7e:64:90:3d:f3:2f:8f:df:82:9b:46:c2:83:30:
         17:23:89:b9:b6:b5:b2:9f:ed:fe:c8:fb:9f:ed:13:4b:4a:2a:
         53:3f:98:0d:f5:d9:42:47:61:d4:de:7c:c1:b6:78:7e:c6:d0:
         31:a2:84:7a:71:43:db:36:81:7d:66:2b:05:c5:0b:18:2d:6a:
         c2:9f:ec:1c:07:df:37:8e:41:4f:54:67:0b:32:40:3d:3c:bd:
         4c:41:04:03:93:32:c3:bf:4f:90:c8:76:24:3b:5d:08:71:d5:
         1f:86:08:9e:e6:ad:90:2e:57:5c:49:ff:14:dc:91:26:73:d1:
         a5:8f:b2:cc:cd:8f:b0:6a:37:80:18:d2:22:c7:57:0b:5a:f6:
         a0:c5:68:ca:16:23:78:1c:2c:3c:7d:ce:46:37:a9:23:2d:f3:
         e1:9f:da:97:6c:5a:44:e2:ec:56:5c:26:ed:ef:a2:70:1f:c5:
         66:bf:9e:72:98:94:e4:fd:a8:a9:11:97:69:6a:02:1a:bc:92:
         3d:b3:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:11:53 2025 by rpki-client